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What is claimed is: 

1 1. A method comprising: 

2 receiving registration information from a user; 
3. verifying the registration information; 

4 issuing a digital credential to the user based upon a 

5 result from the verification; and 

6 communicating the registration information to a 

7 central authentication service. 

1 2. The method of claim 1 further including periodically 

2 communicating a registration status of the user to the 

3 central authentication service. 

1 3. The method of claim 1 further including uploading 

2 client software to the user's computer, wherein the client 

3 software forces real-time authentication of the digital 

4 credential using the central authentication service. 

1 4. The method of claim 1 further including generating a 

2 confirmation level for the digital certificate based on 

3 the verification of the registration information. 
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5. The method of claim 1, wherein verifying the 
registration information includes verifying a medical 
license number. 

6. A method comprising: 

receiving a digital credential from a relying party, 
wherein the digital credential is associated with a user 
registered with a registration authority; 

verifying an identity of the user based on the 
digital credential; 

verifying a registration status of the user with the 
registration authority; and 

authenticating the digital credential based on the 
verifications . 

7. The method of claim 6, wherein verifying the 
registration status of the user includes accessing a local 
copy of registration information maintained by the 
registration authority. 

8. The method of claim 6, wherein verifying the 
registration status of the user includes querying the 
registration authority. 
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9. The method of claim 6, wherein verifying the 
registration status includes verifying that a medical 
license for the user remains valid. 

10. The method of claim 6, wherein verifying the identity 
of the user includes using a public key for the 
registration authority to verify a digital signature of 
the digital credential. 

11. The method of claim 6 further including reporting a 
result of the verification to the relying party. 

12. The method of claim 6 further including storing a 
result of the verification in an activity log. 

13. A method comprising: 

initiating a challenge-response sequence from a 
client computer when a user uses a digital credential; 
receiving a challenge from a remote server; and 
responding to the challenge using the digital 
credential . 

14. The method of claim 13 further comprising accessing a 
registration authority to receive the digital credential. 
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15. The method of claim 13 further comprising forwarding 
the digital credential to a central authentication service 
in response to the challenge received from the remote 
server . 

16. A computing system comprising: 

a web browser configured to accesses a remote server; 

and 

a plug-in software module executed by the web browser 
to cause the server to perform a challenge-response 
sequence when a user uses a digital credential. 

17. The computing system of claim 16, wherein the plug-in 
comprises a Java applet. 

18. A method comprising: 

forming a contract with a relying party to centrally 
authenticate digital credentials issued by a registration 
authority; and 

charging the relying party for the authentication. 
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19. The method of claim 18, wherein charging the relying 
party includes charging the relying party a subscription 
fee . 

20. The method of claim 18, wherein charging the relying 
party includes charging the relying party a transaction 
fee per authentication. 

21. The method of claim 18, further comprising 
authenticating a digital credential by: 

verifying an identity of a user based on the digital 
credential; and 

verifying a registration status of the user with the 
registration authority. 

22. The method of claim 18 further comprising requiring 
in the contract that the relying party digitally sign 
communications presented to a user associated with the 
digital credential . 

23. A method comprising: 

digitally signing an electronic input form; and 
communicating the form to a user for completion. 
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24. The method of claim 23 further comprising: 
receiving the completed form and a digital credential 

associated with the user; and 

forwarding the digital credential and the signed 
input form to a central authentication service. 

25. A system comprising: 

a database configured to store registration 
information received from a registration authority; and 

an authentication server configured to verify a 
digital credential according to the registration 
information. 

26. The system of claim 25, wherein the authentication 
server is configured to receive the digital credential 
from a relying party. 

27. The system of claim 25, wherein the authentication 
server is configured to: 

verify an identity of a user based on the digital 
credential; 

verify a registration status of the user with the 
registration authority; and 
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7 authenticate the digital credential based on the 

8 verifications. 

1 28. An article comprising a computer-readable medium 

2 having computer-executable instructions stored thereon for 

3 causing a computer to: 

4 receive a digital credential from a relying party, 

5 wherein the digital credential is associated with a user 

6 registered with a registration authority; 

7 verify an identity of the user based on the digital 

8 credential; 

9 verify a registration status of the user with the 

10 registration authority; and 

11 authenticate the digital credential based on the 

12 verifications. 

1 29. The article of claim 28, wherein the instructions 

2 cause the computer to access a local copy of registration 

3 information maintained by the registration authority. 

1 30. The article of claim 28, wherein the instructions 

2 cause the computer to query the registration authority. 
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1 31- The article of claim 28, wherein the instructions 

2 cause the computer to verify that a medical license for 

3 the user remains valid. 

1 32. The article of claim 28, wherein the instructions 

2 cause the computer to use a public key for the 

3 registration authority to verify a digital signature of 

4 the digital credential. 

1 33. A method comprising: 

2 receiving a challenge signed by a digital credential 

3 from a relying party, wherein the digital credential is 

4 associated with a user registered with a registration 

5 authority; 

6 verifying an identity of the user based on the 

7 digital credential; 

8 verifying a registration status of the user with the 

9 registration authority; and 

io authenticating the user for the relying party based 

n on the verification. 

1 34. A method comprising: 

2 issuing a digital credential to a user; and 
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3 verifying all uses of the digital credential at a 

4 central authentication service. 

1 35. The method of claim 34, further comprising recording 

2 uses of the digital credential at the central 

3 authentication service. 

1 36. The method of claim 35, further comprising receiving 

2 a request from a relying party for verification of the 

3 digital credential, and communicating the result of the 

4 verification to the relying party. 

1 37. The method of claim 36, wherein the relying party is 

2 one of a plurality of relying parties. 

1 38. A method comprising: 

2 receiving information from a registration authority; 

3 and 

4 creating a digital credential for a user based on the 

5 information received from a registration authority, 

6 wherein the information includes both substantially 

7 static and substantially dynamic information. 
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39. The method of claim 38, wherein the static 
information includes registration information, and the 
dynamic information includes good standing information. 

40. The method of claim 38, further comprising updating 
the dynamic information on a substantially regular basis. 

41. The method of claim 38, further comprising recording 
one or more biometric characteristics for the user. 
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